Web Access Management (WAM) Support Engineer
Job Summary
We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.
Location:Hyderabad Bengaluru
Notice Period: 0-15days
Requirements
We are seeking an experienced Web Access Management (WAM) Support Engineer to provide L2/L3 production support for enterprise Identity and Access Management (IAM) solutions built on the Ping Identity platform. The ideal candidate will have hands-on experience supporting PingFederate PingAccess and Ping MFA with exposure to Ping DaVinci being an added advantage.
The role involves monitoring and maintaining authentication infrastructure troubleshooting Single Sign-On (SSO) and federation issues resolving production incidents supporting cloud-hosted IAM services in AWS environments and collaborating with application infrastructure cloud and security teams to ensure high availability and secure access management.
Key Responsibilities
- Provide L2/L3 operational support for enterprise Web Access Management and Identity & Access Management platforms.
- Monitor the health availability and performance of Ping Identity services.
- Support and administer:
- PingFederate
- PingAccess
- Ping MFA
- Ping DaVinci (preferred)
- PingFederate
- Troubleshoot authentication and authorization issues involving:
- Single Sign-On (SSO)
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Diagnose and resolve:
- Login failures
- Authentication policy failures
- Federation issues
- Token validation errors
- Certificate expiration or trust issues
- Reverse proxy issues
- Session and cookie-related problems
- Login failures
- Analyze:
- Authentication logs
- Browser developer tools
- HTTP headers
- SAML assertions
- OAuth tokens
- OIDC transactions
- Authentication logs
- Support IAM applications hosted on AWS infrastructure.
- Work with Kubernetes / Amazon EKS operational teams for deployment-related support.
- Perform:
- Configuration updates
- Certificate renewals
- Service validation
- Health monitoring
- Patch coordination
- Platform maintenance
- Configuration updates
- Participate in incident management problem management and change management processes.
- Perform root cause analysis (RCA) for recurring production issues.
- Collaborate with application owners cloud engineers infrastructure teams network teams and cybersecurity teams.
- Create and maintain:
- Standard Operating Procedures (SOPs)
- Runbooks
- Knowledge Base (KB) articles
- Operational documentation
- Standard Operating Procedures (SOPs)
- Participate in production releases maintenance windows and on-call support rotations.
- Prepare weekly operational dashboards client reports and service review presentations.
Required Skills
Identity & Access Management
- Hands-on experience supporting:
- PingFederate
- PingAccess
- Ping MFA
- PingFederate
- Strong understanding of:
- Single Sign-On (SSO)
- Identity Federation
- Authentication & Authorization
- Access Management
- Single Sign-On (SSO)
- Experience troubleshooting:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- SAML 2.0
Cloud & Infrastructure
- Experience supporting IAM applications hosted in AWS.
- Operational knowledge of:
- Amazon EKS
- Kubernetes
- Amazon EKS
- Understanding of cloud networking concepts.
Web Security
Knowledge of:
- HTTP/HTTPS
- SSL/TLS Certificates
- Reverse Proxy
- Session Management
- Cookies
- Authentication Flows
- Load Balancers
- Web Access Policies
Directory Services
Experience with:
- LDAP
- Active Directory
- Identity Stores
- User Federation
APIs & Integration
- REST APIs
- Identity Integrations
- API Authentication
Production Support
Experience with:
- Incident Management
- Change Management
- Problem Management
- Root Cause Analysis (RCA)
- Production Monitoring
- Service Restoration
Troubleshooting
Experience analyzing:
- Authentication logs
- Browser traces
- Application logs
- Access logs
- Federation transactions
- Token validation failures
Automation
- Basic scripting using PowerShell Shell Script Python or similar.
Soft Skills
- Strong analytical and troubleshooting abilities.
- Excellent verbal and written communication skills.
- Client-facing experience.
- Documentation and reporting skills.
- Ability to work in rotational shifts and on-call support.
Preferred Skills
- Ping DaVinci
- PingOne
- PingDirectory
- PingAuthorize
- Hybrid IAM environments
- New Relic
- AWS CloudWatch
- Splunk
- Grafana
- Dynatrace
- DevOps support processes
- CI/CD pipelines
- Docker
- Kubernetes administration
- Enterprise IAM architecture
- Large-scale production support experience
- Financial services healthcare or other regulated industry experience
Technical Skills
Mandatory
- PingFederate
- PingAccess
- Ping MFA
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
- AWS
- Kubernetes / Amazon EKS
- LDAP
- Active Directory
- REST APIs
- SSL/TLS
- HTTP/HTTPS
- Incident & Change Management
Good to Have
- Ping DaVinci
- PingOne
- CloudWatch
- New Relic
- Splunk
- Grafana
- Docker
- PowerShell
- Shell Scripting
- Python
Benefits
Required Education:
Bachelors degree in Computer Science Information Technology or related field.